PraisonAI versions before 4.6.40 contain a CWE-22 path traversal vulnerability where hidden metadata in a webpage can cause PraisonAI agents to write attacker-controlled content to arbitrary filesystem locations. The root cause is that the write_file function skips path validation when the workspace parameter is None, which is always the case in production environments. This allows an attacker with limited privileges to write files outside intended directories. The issue is resolved in version 4.6.40.

An attacker can exploit this vulnerability to write files to arbitrary paths on the system running PraisonAI, potentially leading to unauthorized file modification or code execution depending on the environment and file permissions. This can compromise system integrity and confidentiality.

Upgrade PraisonAI to version 4.6.40 or later, where the path traversal vulnerability is fixed. No other official remediation or temporary fixes are documented. Patch status is not explicitly confirmed in the vendor advisory, but the version 4.6.40 is stated as the fix version.